Hi,

...I am now in charge of security. I, of course, have no authority to order any changes.

Is that unusual? In my line of work, on my project I'm the "owner" of certain aspects of it so it's my responsibility to do planning, set agendas, seek help from others, etc., etc. But what actually gets done is decided by consensus at meetings. I can't impose my will on the project.

"It's good to be the king!" - but many of us aren't.

I agree with Bender and others - make sure you document what you feel needs to be done and why. Even if you can't implement the changes on your own, it's important for you and the company that it be done.

Good of luck.

Cheers,
Scott.